Securing a login with root attributes

[raghaven.kumar]

Hi guys,

I am using Zabbix, a network monitoring tool as an application to monitor clients remotely.

So, currently i have this applns. agent installed in various remote servers and the appln. server in my local server.

Now, i need to restart a service when it fails in these remote servers.
For which, i need a user with root attributes at the remote servers.
So i added a user zabbix in sudoers as

zabbix ALL=(ALL) NOPASSWD:ALL

the Nopasswd is set cause i cant pass my password through remote command execution.

Since, this user is almost a root.
I wanted to know what are the ways to protect the user zabbix with these sudo rights?

[raghaven.kumar]

Hi again,
I wanted to know if having a entry like the below
can ed ssh or execute any commands as sudo using "-u zabbix" ?

Defaults        !lecture,tty_tickets,!fqdn

# User privilege specification
root    ALL=(ALL) ALL
zabbix  ALL=(root,ed) NOPASSWD:ALL

ps: i had modified login shel of zabbix as /bin/false